Ransom-Demanding Trojan Virus On Prowl In Indian Cyberspace
Cryptolocker is spreading via malicious hyperlinks shared via spam emails, social media, malicious email attachments (fake FedEx and UPS tracking notices), drive-by-download or as a part of dropped file from other malwares.
"Cryptolocker encrypts files located within local drives, shared network drives, USB drives, external hard drives, network file shares and even some cloud storage drives using RSA public-key cryptography (2048-bit), with the private key stored only on the malware's control servers," country's premier cyber security agency- Computer Emergency Response Team-India (CERT-In) said in its latest advisory to Internet enabled computer users.
"The virus goes on to 'disable' infected system functioning and displaying message to user informing that files are encrypted and later demands payment against decryption key in order to decrypt the files, 300 USD or Euro through an anonymous pre-paid cash voucher (i.e. MoneyPak or Ukash), or 2 Bitcoin," it said.
Once a gullible Internet user makes the payment, the advisory said, the time limit is around 72-100 hours and then the private key (of the user) is destroyed on the server.
Read Also:
